FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Feb 3, 2025 | Nov 29, 2024 |
| Ffmpeg | — | Upgrade to FFmpeg version 7.0 | Jun 5, 2025 | Nov 29, 2024 |
| Suse | — | Upgrade libpostproc-develUpgrade libpostproc55_9-32bitUpgrade libavformat61Upgrade libavresample3Upgrade ffmpeg-4-libavutil-develUpgrade ffmpeg-4-libavdevice-develUpgrade ffmpeg-4-libpostproc-develUpgrade libavdevice58_13-32bitUpgrade ffmpeg-4-libavcodec-develUpgrade libavformat57-32bitUpgrade libavdevice57-32bitUpgrade libswresample5Upgrade libavutil55Upgrade libavfilter6Upgrade libavfilter7_110-32bitUpgrade libavutil56_70-32bitUpgrade libavutil56_70Upgrade ffmpeg-private-develUpgrade ffmpeg-4Upgrade libavcodec57Upgrade libswscale5_9-32bitUpgrade libswresample2-32bitUpgrade ffmpegUpgrade libavdevice57Upgrade libavcodec58_134Upgrade libavdevice58_13Upgrade libavcodec58_134-32bitUpgrade libpostproc58Upgrade libavfilter10Upgrade libavcodec61Upgrade libavformat57Upgrade libavresample4_0Upgrade libavutil59Upgrade ffmpeg-4-private-develUpgrade libavresample-develUpgrade ffmpeg-4-libavresample-develUpgrade libavformat-develUpgrade libavdevice61Upgrade libswresample3_9-32bitUpgrade libpostproc54-32bitUpgrade libavresample4_0-32bitUpgrade libswscale8Upgrade libswscale4Upgrade libpostproc54Upgrade libswresample-develUpgrade libavresample3-32bitUpgrade ffmpeg-4-libavformat-develUpgrade libswscale-develUpgrade libpostproc55_9Upgrade libavdevice-develUpgrade libswresample3_9Upgrade libavformat58_76-32bitUpgrade ffmpeg-4-libswresample-develUpgrade libswscale4-32bitUpgrade libavutil-develUpgrade libavformat58_76Upgrade libavfilter7_110Upgrade ffmpeg-4-libswscale-develUpgrade libavcodec-develUpgrade libavfilter-develUpgrade ffmpeg-7Upgrade libswresample2Upgrade ffmpeg-4-libavfilter-develUpgrade libavfilter6-32bitUpgrade libavcodec57-32bitUpgrade libavutil55-32bitUpgrade libswscale5_9 | Dec 5, 2025 | Jul 17, 2025 |
| Ubuntu | — | Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-dev (Ubuntu Pro) | Jun 26, 2025 | Nov 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub